[Company legal name], a company registered in Cyprus [registration number], registered address [address]. We are the data controller for the personal data described in this policy. Contact: [email].
[e.g. name, email, phone, shipping address, order history, and photos submitted through the trade/sell form.]
[e.g. to process orders, arrange delivery, respond to trade requests, and manage your account.]
[e.g. contract performance for orders; consent for marketing; legitimate interest for fraud prevention.]
[e.g. Stripe (payments), our shipping carriers, Supabase (data hosting), Resend (email). Name each processor.]
[Retention periods for orders, accounts, and trade requests.]
Under GDPR you have the right to access, correct, delete, or export your data, and to withdraw consent. To exercise these rights, contact [email].
[Describe any cookies or local storage used, e.g. cart and login session storage.]
[Statement that the policy may be updated and how users will be notified.]